quiet-conversation

[foggy star]

i remember trying to install when i was a teenager lol

[mystic tulip]

I have used Ubuntu and pop OS as main OSes in the last few months

[slender coral]

yeah, it's not very easy, but still achievable. I followed recommendations on arch wiki and watched some videos

[mystic tulip]

How much time did it take

[slender coral]

around 2 hours

[foggy star]

reminds me of gentoo. but great way to learn about lGNU/linux

[mystic tulip]

I want a distro that gets my work done, I don't want to work on the OS for a long time, what distro should I use?

[slender coral]

yes it is indeed a great way to learn!

[foggy star]

parrot is nice

mint is great too

[mystic tulip]

Should I stuck to Ubuntu, it seems to work well for me, would I waste my time distro hopping at this point?

[foggy star]

yeah unbuntu is great

[mystic tulip]

I had mint for a day when I first Downloaded Linux from windows

It's decent but not a good way to LEARN Linux imo

[foggy star]

its all debian

[mystic tulip]

Exactly

[slender coral]

if you want to learn Linux more deeply, maybe I'd suggest you trying arch

[foggy star]

whatever floats your boat. arch would be fun to learn.

i say its like working on a car

[mystic tulip]

VM or live boot

[slender coral]

but yep, it won't be so easy at start

[mystic tulip]

I don't mind learning and solving problems at all

I enjoy it in fact

[foggy star]

yeah its just like baning your head against the wall but after you get numb to it 😛

[slender coral]

well Ig you can try to install it straightaway on live. if you follow the tutorial you'll get it to work

[mystic tulip]

How is the gaming performance on arch, ik it's not smth an arch user would prioritise but I play games occasionally

[slender coral]

can't say much, I don't play games. if I did, I guess I still do it on windows

[mystic tulip]

What do you think of dual boot? Ever had a bad experience with it?

[foggy star]

i try it with kali didnt work out

[winged rain]

It's not bad, I have a friend who runs in on bare metal and it's not too noticable

[slender coral]

dual boot is definitely a way to go. my setup is dual boot

[winged rain]

Yea, windows usually tries to eat ur grub it's not fun

[mystic tulip]

Interesting, never had any issues with it eh?

[mystic tulip]

That is what I hear a lot

[slender coral]

luckily I hadn't

but yeah some shit may go wrong any time

[mystic tulip]

My friend dual booted windows and Ubuntu and Ubuntu stopped working after some time of not using it

It didn't boot anymore

[slender coral]

that's interesting

[mystic tulip]

What was ur first distro?

[slender coral]

ubuntu I think

[odd acorn]

Dual boot for what?

[mystic tulip]

Nice

[slender coral]

my second was debian as far as I remember

[mystic tulip]

Games and Microsoft only applications

[odd acorn]

And what about the other OS?

[mystic tulip]

I am considering switching to debian from Ubuntu

[mystic tulip]

Programming, hacking machines on the Linux OS, games on windows

[odd acorn]

You should hack in a VM not on a host

[foggy star]

parrot is a lighter version of kali if you are doing security

[odd acorn]

It’s not good security practice to hack on your host

[slender coral]

or use a separate machine only for these needs

[odd acorn]

Run windows with a Linux VM

[odd acorn]

No.

[foggy star]

so with arch, do you just have the terminal at first. then you decide what packages you want to download? what makes it hard for the avergae joe?

[mystic tulip]

That is what I do, Kali VM for hacking

[odd acorn]

What’s the purpose of dual booting then? 🤔

[mystic tulip]

Currently I use Ubuntu as a main OS for programming
-Kali VM for hacking
-windows VM for some work
-windows server for server administration stuff

[foggy star]

arch if you want to be badass

[slender coral]

pretty much yes. you setup the system manually, like the keyboard, internet connection, install packages, etc.

install a desktop environment or window manager

[mystic tulip]

Is stock debians installation similar

Or is it simple like Ubuntu

[slender coral]

true words

[foggy star]

hahah yeahh buddddy

[slender coral]

:)

[foggy star]

alots of distros are debian base just comes with different flavors

[mystic tulip]

Why don't people just use debian instead.of debian based distros, what makes it less popular

[foggy star]

different needs, different wants

[slender coral]

real g's will use LFS

[foggy star]

hahahahha awesome

[slender coral]

[foggy star]

[olive frost]

Hey, can I have a quick DM with you?

[mystic tulip]

Sure

[foggy star]

what movie was that in your profile pic?

i think he acted in th egodfather

sunny

[slender coral]

I think it's a movie with ryan gosling, ehh forgot the name

[foggy star]

bladerunner

[slender coral]

yeah right!

but the guy on my pfp is terry davis

[foggy star]

IS IT

TEMPLEOS

[slender coral]

yeah right, the mind behind this gods creation

[foggy star]

did you see video on him?

[slender coral]

depends what video exactly

[foggy star]

https://www.youtube.com/watch?v=UCgoxQCf5Jg

[slender coral]

oh that's a popular video, yet I guess still haven't watched it

thanks for recommending it

🍿

[foggy star]

[slender coral]

[foggy star]

lol

[foggy star]

whats up?

[slender coral]

today learned about basic network stuff on thm. that's all of my progress for today

😅

[foggy star]

lol! little by little. Brick by Brick!!!

[slender coral]

yeah at least I'm trying to lol

[foggy star]

im 34 and im starting to learn about computers again.

[foggy star]

[slender coral]

good it's never too late

[foggy star]

nope! never too late! always fun to learn even through it can be frustating sometimes

[slender coral]

that's true yes

sometimes I get too frustrated or even mad that something doesn't work

[foggy star]

lol join the club!!!

[slender coral]

but I guess I should view it as a part of the process

[foggy star]

o my god yes

im always re reading over try hack me courses

[slender coral]

btw do you have a subscription?

[foggy star]

i do

[slender coral]

damn that's cool

I don't, but 80% of the content is free so i guess i'm fine for now

[foggy star]

yeah thats a great part about tryhackme

[slender coral]

yup

[foggy star]

hack the book is really diffucult

[slender coral]

yes I heard about that too. it's more difficult

but yea I think we'll get there

[foggy star]

one day at a time

samething with me and weldin

[slender coral]

yup this approach applies to any skill

[foggy star]

makes me wonder how insecure some companies are tho

[slender coral]

yea I remember how geohotz jailbreaked Iphone or his Sony hack

legendary

[foggy star]

lol yes man i forgot about that one!

[slender coral]

not sure if it's the right example, but it's crazy that this guy competed with such large businesses

[foggy star]

alot of those big companies had weak security. they don spend enough money to make it secure. It all goes to the share holers and CEOS lol

[foggy star]

hows it going?

[slender coral]

not bad. I just woke up

[foggy star]

sleep good?

[slender coral]

yes. but I think I need to go to bed earlier, my sleep schedule is messed up

[foggy star]

yeah. i get like that when i work night shifts.

[foggy star]

hows it going?

[cunning wharf]

Anyone here? I'm new :P

[opal leaf]

hello can someone help me to use Hydra right ? i got a really weird stuff

[hidden canyon]

what is the problem u are facing?

[lucid bane]

By any chance, is there someone who can help me to explain upload reverse shell? I completed room upload vuln but still have couple of questions. Thanks

[hidden canyon]

yeah what do you need to know @lucid bane

[lucid bane]

First of all thank you for your answer! My question is, when you upload a file on a web, when I click on uploaded file or try to open it via link, it is automatically downloaded to my computer and not executed on a web. Or is it? That's what I don't understand 😄

[hoary nymph]

Gave +1 Rep to @hidden canyon (current: #807 - 4)

[lucid bane]

Also, is there any automated tool to scan web vulnerability which is for free?

[hidden canyon]

you can use curl

[hidden canyon]

owasp zap is good

[rotund trellis]

is anyone playing Exfilibur room?

[south inlet]

#1210662756659765330

[rotund trellis]

tks

[agile storm]

is there an issue with thm vpn, my machine shows the tun0 ip but the website is not reconizing it

[radiant jacinth]

Ipconfig tun0 up

[little shore]

How is it not being recognized?

[south inlet]

Access machine page is borked.

[summer jetty]

shhh quiet

i like quiet

[wary ridge]

Nikto

[errant star]

Hello. I am new . Can anyone pls guide me what I should do. How to start. Thank you

[maiden urchin]

#start-here

[opaque cairn]

Hi Guys, hope everyone is doing well. I managed to clear the Sec+ in the first go, was wondering how best to leverage this. Any tips /inputs would be most appreciated. Thanks

[crisp loom]

hello

[old jackal]

Hey yall, I'm new here. Looking for some fun beginner/intermediate rooms, what do you guys recommend?

[mystic tulip]

Can wireshark be used to listen to live phone calls?

[maiden urchin]

No

[mint sphinx]

how did you guys start learning

ethical hacking

[humble fox]

Hello I keep receiving unable to connect in firefox after putting my attack machine address even though I'm connected to openvpn in virtual box kali

[summer jetty]

if the link is https remove the s so it becomes http. Thats usually the first thing i try

[little shore]

#start-here

[gray warren]

Hlw..

I am new here

[mint sphinx]

I will try to use codecademy

[civic summit]

Hi, what is it worth writing walkthrough and writeups ?

[cosmic dragon]

its good practice for doing PoCs

[signal gale]

Don't stop studying and prep for cysa+

What you learn in security+, leverage that and learn some more stuff in cysa+ and you can pass it

Don't wait like me after 3 years of security+

I had to relearn couple of things from sec+ in additional to what cysa+ is asking

Also you can try to find gov job with sec+

[tawdry dove]

Professor Messer on Youtube, Get Certified Get Ahead for the book, and Dion's practice quizzes are what I used. The Sec+ exam was basically a recap of core concepts from my degree though, so ymmv.

[young snow]

Hlw..
I am new here

[opaque cairn]

Thanks, I was hoping to get into a job before going for cysa+ , are there private companies hiring for remote positions for these kind of roles? Any info would be helpful

[hoary nymph]

Gave +1 Rep to @signal gale (current: #2013 - 1)

[opaque cairn]

Yeah, i used Jason Dion course, the Gibson book and McGraw hill test bank to get through, my question was more about how best to move forward towards getting a job now. Thanks

[signal gale]

Not really remote position which is hard. Since I am living in West Coast and apply most job

They require you to be East Coast and/or near where the company is at

They can at most do hybrid but they tend to want someone on-site

I am sure once you work for them a year or so you can do more stuff remote, but I probably lean it being very rare chance

[tawdry dove]

Gotcha, I could have sworn you were asking how to pass on the first go, so my bad

Do you have a degree?

Where are you geographically?

[opaque cairn]

Yeah, have a degree in comp sci , based out of India

[opaque cairn]

Oh ok, yeah it does look like getting a remote position is quite rare

[summer jetty]

shhh quiet mouse

[pearl bobcat]

hh

[radiant jacinth]

Hello

[ripe pewter]

3 mar

[spiral granite]

is this channel called quiet conv* because of what?

like is it relevant to the topic of conversations?

for I've been wondering for a while about a certain question

[summer jetty]

it has a slowmode so its much more calm and not overwhelming

[spiral granite]

what'd be the point

[twin ridge]

Sometimes general gets a bit hectic

[frail vault]

TryHackMe

Ollie

Ollie Unix Montgomery - Rest in Peace, 5th of January, 2023

[summer jetty]

i might put linux as my childs middle name

or tux

[frail vault]

TryHackMe

Ollie

Ollie Unix Montgomery - Rest in Peace, 5th of January, 2023

[wild cape]

Dang

R.I.P ollie.

[radiant jacinth]

Ollie 😢 R.I.P

[high viper]

R.I.P. ollie

[sly skiff]

R.I.P OLLIE 🥺

[frail vault]

TryHackMe

Ollie

Ollie Unix Montgomery - Rest in Peace, 5th of January, 2023

[timber spruce]

hey i am unable to find the solution for Insert flag15 here in Windows Local Persistence
walkthrough

[little shore]

#room-help or #room-hints would be the best place for this.

[radiant jacinth]

Hola

[ivory isle]

So, speaking about VPN, can anyone recommend a VPN provider (or advise against it)? I narrowed my choices down to three: ExpressVPN (being the most expensive one), PureVPN (being the cheapest one) and NordVPN (maybe the most popular one, but so heavily advertised that it seems suspicious 😄 )
Any thoughts? (Living in Central Europe, since it might matter)

[mighty echo]

https://mullvad.net/en is very good

NordVPN is heavily frowned upon by most people here, and are famous for the amount of breaches they have

[mighty echo]

ProtonVPN is also a solid choice

[summer verge]

I have seen a lot of people here recommending Proton, also I've seen people talked in favour of Mullvad. I personally have used Nord since 2018 and I have never had an issue.

[ivory isle]

Thx guys, might take a look at Proton actually, since I already have a mail account there. Allthough I am not sure about their free version. Like everyone says that free VPNs are often lacking certain standards/features.

[mighty echo]

If you want a decent free VPN, checkout cloudflare WARP

[spark sun]

what are you trying to accomplish with your VPN use-case?

[ivory isle]

Privacy (even though I don't have much to hide) and increased security. Even our ministry recommends using a VPN for private use, I found out today 😅

For now I was using one only for business cases (Home-Office)

[spark sun]

do you know what split tunneling is, and the pros and cons of it? VPNs don't actually give better privacy or security unless you have concerns about the websites you visit being datamined or similar. If you are only browsing HTTPS websites and are concerned about some organization or individual looking at the content you browse, a VPN doesn't really do anything extra.

[ivory isle]

Yep, I know about that.
I have to admit, I might be a bit paranoid lately, but yet, not using ones "true" IP address should always be plus, privacy wise. No?

Oh, and I am travelling a lot, using wifis on airports hotels and other public areas. Where I also think a VPN might come in handy

[spark sun]

so long as you are careful of the certificate chain, you shouldn't really have a problem. Wifi is kind of garbage in general, but there's a difference between sniffing your traffic and decrypting the contents. "True" IP address is a bit of a misdirection, as IP address is dependent on the network your traffic is originating from. Your "true" IP address will be the endpoint that your target address sees, and depending on how the VPN is configured, DNS queries may still be obsesrvable by your ISP.

the actual effect of a VPN on a public wifi network is that you are going to experience slower download speeds, as your traffic ends up with a lot more overhead due to the tunneling.

[twin ridge]

I mean that's still cloudflare but if you're fine with that

I have a wireguard setup up to my home network I use on public/hotel wifis

[fathom panther]

Even then, I’ve been thinking. Is there such a big threat model with public WiFi that you have to use VPN?

[twin ridge]

In airports and cafés, yeah, as the wifi is usually unencrypted

With HTTPS being more common it's less problematic

[mighty echo]

I'm not sure what you mean by this

[frail rapids]

you can also just enable https-only mode in the browser

[twin ridge]

Assuming the server on the other end supports it

Which is more and more true

[frail rapids]

yup

even if the server doesn't support it, I'd rather have temporarily no website than an possibly compromised one :p

[twin ridge]

Ye, but HTTPS still has the url in the clear

[frail rapids]

oh well

[twin ridge]

They've had privacy issues in the past

[mighty echo]

I see

[fathom panther]

Not just HTTPS but CAs and other mechanisms that are installed on the browser itself

[haughty bay]

Hi am new here pls I can’t see my first task transfer of bank account balance to proceed to th next stage any help

[midnight ravine]

what/where

[twin ridge]

Have you looked in #room-help ?

[runic thicket]

keywords search in path channel is always a good shout to get hints

[twin ridge]

Sometimes yeah

[radiant jacinth]

why does thie not work?

[little shore]

To which are you referring to?

[radiant jacinth]

i dunno

not important

[twin ridge]

Because shenanigans or user error

[runic thicket]

https://tenor.com/view/lies-liar-south-park-shenanigans-gif-14746341

[simple citrus]

wait... this is what he says in the english version?

[cosmic dragon]

yup https://www.youtube.com/watch?v=UbtByiZrKqY

[simple citrus]

where I come from its simply: cheating booth

[hidden galleon]

hello friends , any suggestion to bypass this fiilter

function filter($command) {
if(preg_match('/(`|.|$|/|a|c|s|require|include)/i', $command)) {
return false;
}
return true;
}

if(filter($command)) {
eval($command);
echo "Command executed";
} else {
echo "Restricted characters have been used";
}
echo "\n";

[odd acorn]

What’s this from?

[hidden galleon]

im just solving a web challenge

[radiant jacinth]

is there any blogs for the progress of bug bounty i looked at hacker ones hacktivity but that barely shows anything

[odd acorn]

Link?

[frail vault]

TryHackMe

Ollie

Ollie Unix Montgomery - Rest in Peace, 5th of January, 2023

TryHackMe

Ollie

Ollie Unix Montgomery - Rest in Peace, 5th of January, 2023

TryHackMe

Ollie

Ollie Unix Montgomery - Rest in Peace, 5th of January, 2023

[wispy mauve]

Ollie

[frail vault]

TryHackMe

Ollie

Ollie Unix Montgomery - Rest in Peace, 5th of January, 2023

[frail vault]

TryHackMe

Ollie

Ollie Unix Montgomery - Rest in Peace, 5th of January, 2023

[frail vault]

Pong!

API Latency

103ms

Client Ping

186ms

Mar 11, 2024, 2:12 AM

[frail vault]

TryHackMe

Ollie

Ollie Unix Montgomery - Rest in Peace, 5th of January, 2023

Pong!

API Latency

109ms

Client Ping

164ms

Mar 12, 2024, 1:27 AM

[frail vault]

Pong!

API Latency

108ms

Client Ping

270ms

Mar 12, 2024, 9:12 AM

[frail vault]

Pong!

API Latency

106ms

Client Ping

265ms

Mar 12, 2024, 5:45 PM

[summer verge]

is this quiet-conversation or try the bot and dog pic channel?

[radiant jacinth]

Both

[south inlet]

Hello, can we please use bot commands in their respective channels please? #bot-commands

Thanks! 😄

[cosmic dragon]

@odd acorn

[civic root]

Done!

[frail vault]

Pong!

API Latency

101ms

Client Ping

226ms

Mar 18, 2024, 11:10 PM

[summer verge]

@loud harbor for bot commands use #bot-commands 🙂

[broken goblet]

Evenin’ all!

[heavy saffron]

Good evening ladies & gentlemen

[midnight axle]

[radiant jacinth]

Hello internet people.

[frail vault]

Information

Discord Slash Commands

https://support.discord.com/hc/en-us/articles/1500000368501-Slash-Commands-FAQ

Mar 20, 2024, 9:49 AM

[tacit solstice]

Hey friend

I realized this weak that it's a lot easier to hack with friends than to do it alone. I think it really helps you keep a streak when you've got morale from others doing it with you. Kinda like hitting the gym. Anyone wanna team up?

[real dragon]

we can team up

[brittle epoch]

Hello everyone, I am having problem form the answer with benign challenge last question. I found the answer however everytime I type the answer it says incorrect. Can anyone help me on this? Thanks

[hazy horizon]

Hey that seems to be a good idea leats team up

[jolly vale]

lmk : )

[barren olive]

Hello everyone!

I am a new member!

[hazy horizon]

Hello

[barren olive]

hi

How to sanitize in python?

[flat karma]

What du you want to do? get rid of characters or symbols in strings?

[barren olive]

I wanna remove script tag in payload in python.

[frail vault]

Pong!

API Latency

111ms

Client Ping

267ms

Mar 21, 2024, 5:45 AM

[flat karma]

u can achieve this with .strip

[barren olive]

I wanna use html sanitizer

[rugged frigate]

look at the docs and how to properly sanitise html.

[spiral granite]

that's whole other layer
why does it sound so difficult? even though naturally so basic?

[tacit solstice]

Awesome. Can I dm you?

[tacit solstice]

Great... Can I dm you?

[tacit solstice]

Hey and Welcome.
How are you finding it so far?

[barren olive]

hi

How are you

Nice to meet you!

[tacit solstice]

I'm doing great. I'm from Ghana.
How are you?

[tacit solstice]

Nice to meet you too

[barren olive]

I am good. I am from Serbia.

[tacit solstice]

Thats cool. What's your username on tryhackme?

[tacit solstice]

Or better still, what's your username on tryhackme?

[tacit solstice]

And yours too. Your username?

[barren olive]

Mihailo Katanic

[tacit solstice]

I think I just sent you a request. I find that it's a little easier to keep a streak when you're doing it with a team of friends. You can join the invite if you agree. uk, for the morale 🔥

[barren olive]

OK good!

But how?

[tacit solstice]

On the last section on the right side of your dashboard page, you can find friends and see their daily progress and be encouraged

[hazy horizon]

Yes please

[fathom panther]

wow, ive never seen this before but tbf ive never added friends in thm.

[barren olive]

Can I dm?

[tacit solstice]

I actually found out only recently. The internet outage really took a toll on my streak though

[tacit solstice]

For sure 👍

[jolly vale]

Yeah sure

[heavy saffron]

I want to have friends too 😓

[tacit solstice]

There's no such thing as too many friends 😁
What's your THM username?

[heavy saffron]

h8ag

[heavy saffron]

[tacit solstice]

sent you a request

[tacit solstice]

Welcome aboard friend

[uncut shell]

you can add me if you want

Sara98 on THM

[lime fern]

Wow

[tacit solstice]

I gladly will

Request sent

[violet cypress]

damn this chat is very friendly

[radiant jacinth]

This whole server is 😄

[jolly vale]

@plucky badger

[tacit solstice]

request sent 😁

[tacit solstice]

Yhup yhup yhup

[hard oasis]

Any room for one more? My THM is (ImN0tGrimm) the O is a zero

[jolly vale]

@acoustic talon

[tacit solstice]

😬 I can't find this one. My own username is Raydote. You can go ahead and send an invite

[jolly vale]

Oh no, I just tagged them to let them know about that : )

[hard oasis]

Are you inviting people to a rooom or adding their discord?

[jolly vale]

I know that they looking for same like us

[tacit solstice]

I'm adding them up as friend on tryhackme. It allows us to track each others progress (streak, current room, points, profile etc)

[hard oasis]

Id love to be apart if you'll have me🙂

[plucky badger]

Hey team! Let’s start learning together and maintain streaks lol

[stiff rapids]

Yoooo

[plucky badger]

Hi!

Add me if anyone wanna ace up learning cybersecurity skills here with me

| majestic_capybara_80895 |

[tacit solstice]

What's your username on thm?

[tacit solstice]

Can't find you.

[plucky badger]

Oh! Lemme go check

majestic_capybara_80895 It's the username

[lime fern]

w usernmae

[plucky badger]

I don't have any idea. Why you all unable to find me.

[plucky badger]

What's your username! Lemme add from my side

[lime fern]

No I ment

[tacit solstice]

I'm Raydote

[tacit solstice]

That's my username

[plucky badger]

Yeah, I sent request

[bitter pecan]

dead chat

[summer verge]

is not dead, it's quiet, the clue is in the name 😉 😂

[hard oasis]

ImN0tGrimm but the O in not is a zero

[tacit solstice]

😬 I see to have hit my maximum amount of friends I can add. Try adding me instead.
Username: Raydote.
I don't know whether it will work

[summer verge]

Excuse me, Mr Popular 😉 😂

[tacit solstice]

It's not working is it 😥

[cursive igloo]

#rules

[lime fern]

Wow

[fluid galleon]

Hello guys

New here

[hard oasis]

I sent a friend request, if it doesnt work, no worries. Ill see ya around on discord😁

[tacit solstice]

It worked

[twin ridge]

Please don't minimod, no rules were broken here that I can see

[primal mauve]

Hey guys. I'm new to the world of hacking. I'm from India and would love to team up. Thanks !!

[ebon fog]

Nice ! keeping it up hackers

[ripe lotus]

Hey anyone wanna teamup / share knowledge on doing machines

[tacit solstice]

I'm down if it means being consistent 🔥

[plucky badger]

Folks! Anyone learning Soc-1. Let me know! Let's finish it up together..

[summer verge]

the end of that sentence didn't sound right 😂

[stuck pecan]

Im going to add you too if you dont mind xero1726

[stuck pecan]

how many friends are you allowed to have?

[tacit solstice]

Way to go @uncut shell Your consistency is impressive 👍

[tacit solstice]

A maximum of 10

[stuck pecan]

wow

thats not alot

[uncut shell]

Yeaa, been taking notes with Obsidian recently and its pretty great just finished that Networking Intro and have it eh "compacted" down to 750 words lol

[plucky badger]

Haha! Atleast that way I can finish up lol

[tacit solstice]

Never heard of Obsidian till now and wow. thanks for sharing. I'll give it a try

[hoary nymph]

Gave +1 Rep to @uncut shell (current: #2034 - 1)

[summer verge]

that sounded even worst 😂 😛

[lime fern]

I gotchu “let’s do it together”

[stiff onyx]

Hey guys, what virtual machine is the best?

[tawdry dove]

Do you mean hypervisor? If you're talking about operating systems, use what fits your needs best.

[stiff onyx]

I want to install kali Linux for my Mac, what is better to use vmware workstation or virtualbox

[tawdry dove]

You're going to need to choose a hypervisor that fits your CPU architecture

Apple Silicon has a different instruction set than Intel x86 so you're options are going to be different

Also note, your performance is going to take a hit because whatever you choose is going to need to emulate the hardware/instruction set kali needs through software

[stiff onyx]

Okk thank you 🫶

[primal mauve]

Obsidian is a great tool.

[prime belfry]

Cherry tree too

[flat karma]

Obsidian + markdown ftw :3

[vocal imp]

I am using qemu for having kali as vm but I hate that it's capped to 60Hz and while searching I tried gpu passthrough but I figured it's only for multi GPU use only, is there any other way?

[primal mauve]

You could try VMware.

[uncut shell]

Vmware afaik doesnt support GPU passthrough atleast not in their free version nor have i see options for going above 60hz.
Sadly just one of the downsides of VMs

[south inlet]

Workstation pro doesn't do it either.

[neon crystal]

If your not scared, you could even run a kemu docker 👀

[frail rapids]

perhaps you could just run CLI-only with WSL

I heard a while ago that theres even GUI support for WSL now

[still grotto]

Hi everyone, I get the "restart pause" error when using vpn, does anyone know a solution?

[vocal imp]

Whats that

[neon crystal]

kasm, mb, i confused it with qemu

[radiant jacinth]

guys gotta be quiet in here shhhh

[radiant jacinth]

Is there any service that has that provides that feature?

[uncut shell]

None that i know off, if you really need it you're better off either dual booting or depending on what you need it for eg. hashcracking, just run that on the host

[radiant jacinth]

Just VM but it's fine. Not the end of the world xd

[vocal imp]

I have tried dual-booting but I have been using HTB vpn and it doesn't work that well on host they suggest to use a vpn so idk what to do😂

[stuck ermine]

Hello guys I need a friend for Bug hunting i am a beginner because i don't have any cyber security friend 😞

[radiant jacinth]

Join the general voice chat

[velvet kestrel]

yo fatty kitons how do i eat burgers

[uncut shell]

another fun thing is, if you're having trouble summarizing a text like i tend to have~ ChatGPT is pretty good at that

Also, the Obsidian Nord Theme is soo much better than the default lol

[slender ferry]

loved it, tks

[soft pier]

booo nord is not good
use catppuccin instead

[slender ferry]

loved the colors, hated the font

[soft pier]

???

[uncut shell]

eh it nice but i like some difference in colors for my notes 😅

[soft pier]

should be easy to change the font

[slender ferry]

i'll go with nord, old habits die hard

i've already been using it for 4 minutes now

[uncut shell]

ah, 10 minutes here

[slender ferry]

the old me was such a 🤡, who uses default?

[uncut shell]

ikr

[soft pier]

shadow is probably never switching of catppuccin now as they more or less got all apps to use it at the same time

[tacit solstice]

Oh yeahh.. I been doing that too. I got the version 4 so sometimes I copy everything in section of a room and I ask it to explain with analogies. Great tip Sara

[thorn mica]

why i am just hearing about Obsidian, I have been using Notion this whole time 🥲

[thorn mica]

I been looking for a Notion alternative. And i can migrate my notes too 😆 . Thanks for sharing! @uncut shell

[hoary nymph]

Gave +1 Rep to @uncut shell (current: #1015 - 3)

[tribal tundra]

nice, another Obsidian Nord user in the wildlife

[fathom panther]

@south inlet

[south inlet]

Yeah. They've already left.

[radiant jacinth]

I guess we are all using obsidian now

Downloaded it on my phone like a month ago but never installed it on my pc

[quaint basin]

Obsidian is great... Until you stick anything malicious in your notes (e.g., bad powershell commands, maldev stuff, tools, etc)

At that point antivirus kicks in and reminds you why plaintext is a very bad format for hacker notes

[radiant jacinth]

How did you change the color?

[uncut shell]

Cog wheel at the bottom left -> Appearance -> Themese -> Manage ; so you can download a new theme

[radiant jacinth]

I got a different theme but you've got differently colored text

[uncut shell]

It's just Obsidian Nord, it depends on the theme you pick

[radiant jacinth]

oh

I'll give it a try, I downloaded the Minimal one

[cosmic dragon]

til obsidian has themes

[radiant jacinth]

I get it now, I was confused because I watched YT video and they had a color picker for text and I didn't see that anywhere on my Obsidian

[uncut shell]

Ah, there's also community plugins, which that might have been

[trail cove]

Why is the number '37' everywhere? https://www.youtube.com/watch?v=d6iQrh2TK98

[rugged frigate]

missed opportunity to make the video 37:37 long

[radiant jacinth]

there's a shlong joke there somewhere

[raven river]

Hey guys, I hope you are doing great! I am trying to do "Crack the hash" the room but last 2 task of Level seems impossible to crack it even though I followed the some guys and did the exact same thing but I cannot get the result, did someone do this room? If so, I appreciate anyone who will ping me about that..

[south inlet]

#room-help

[raven river]

thanks, I confused 2 times 🙂

[teal matrix]

hi guys

[cobalt kelp]

heyo! I'm also new, and I honestly hope this server will help me keep it up with the courses, coz in the last month I totally forgot/didn't have time for it, and it felt kinda like a waste of money - it sucks you can't "freeze" your remaining days which you paid for

and the server seems to be nice and helpful, I'm looking forward to stay here ^^

[loud spindle]

Hello,
what is the best recommended thing I should do in order to improve my thinking as a web pentester , and does learning a full stack web development helps ?

[ebon fog]

@loud spindle learn basics about web ( like the working , technologies ) , then you are able to think like a pentester of web, and learning full stack is not recommended because , it's better to learn those languages which are used in web and go into deepth of web, to make it secure.

[loud spindle]

actually I am not familiar with web can you clarify for me please
do you mean like I need to learn how web works, and technologies like what

[ebon fog]

ofcourse bro ! if you want pursue web pentesting , it's compulsory to know its working and technologies , so that you find any bug and make it secure

[ebon fog]

when we understand the problem(battle) , then we bravely solved(played) it!

[loud spindle]

so the best thing I can do right now is to understand web and how it works and I think network is crucial too

[ebon fog]

I think U understand,

[loud spindle]

Thank you brother , I appreciate your help

[hoary nymph]

Gave +1 Rep to @ebon fog (current: #515 - 8)

[burnt night]

@raven delta please leave enforcing the rules to the mods

[raven delta]

sorry didnt want to enforce rules, just wanted to tell him to start with the basics. Ill keep out of it

[summer jetty]

1337

[summer verge]

I thought the important number was 42 😉

[novel geyser]

Happy Friday, everyone

[native trail]

Hey guys, new here. Am i allowed to ask for help? I'm trying to reverse engineer a potential 0 day, but i'm no expert.. Yes i got hit with it

[south inlet]

"got hit"

You got hacked?

[native trail]

yep, one of my environments unfortunately.. it's super sophisticated for me

[twin ridge]

There are rules regarding handling machines for forensics purposes...

[steep thistle]

hello

can someone teach me hacking

[south inlet]

Have a read over #start-here

[steep thistle]

this is a cyber security server

[native trail]

general rules or on this server rules? unfortunately the machine had restarted before i had a chance to image it, but i did find enough for a full investigation which ive been doing myself so far

[steep thistle]

not a hacking server?

[twin ridge]

Legal rules usually

I hope you're investigating on a copy

[south inlet]

It's an ethical hacking server, not a black/dark hat teaching community.

[twin ridge]

We do bad things within the law

[steep thistle]

yeah like that

[twin ridge]

Usually on non prod

[steep thistle]

i meant ethical hacking

i got an account what should i do?

[south inlet]

Then read over #start-here

[native trail]

Guys i'm just an IT administrator, and a client got hacked.. i've take the info that i have found and am investigating, so i am checking if anyone would like to assist, if this isn't the right place maybe someone knows of one?

[south inlet]

I think you should contact the authorities and more dedicated team of people?

Instead of a random discord you just joined?

[south inlet]

As Hydra said earlier, there are rules with this sort of thing, legal and professional.

Please don't ask for more help on this situation please.

[native trail]

ok thanks

[steep thistle]

i have a doubt i cant see the fake bank machine page

[south inlet]

#room-help please

[twin ridge]

said rules are centred around keeping proper custody and integrity of the issue so that it can be admissible in an eventual court proceeding. If you do not have the competence in house for this, then contact your local law enforcement who may have expertise. Also depending on where you are, there may be mandatory reporting requirements.

[native trail]

i'll look into it, thank you @twin ridge

[hoary nymph]

Gave +1 Rep to @twin ridge (current: #11 - 562)

[scarlet ferry]

Hey guys, new to this discord. Wanted to know, what's the interest of Black Hats? Are they really an essential part of this hacking ecosystem, or would you turn them all into White Hats if you could?
Not aspiring to be one at all, I'm just genuinely interested in having some of your opinions on it

[cosmic dragon]

@odd acorn can probably give you a good answer to this

[scarlet ferry]

Ty for forwarding this haha

[lime fern]

Well there’s no interest here in black hats, as in this is a ethical hacking server but there not really essential because obviously I think everyone in this server would wish there was no black hats because of the bad they cause people, but even if there were no black hats (which is impossible) there would still be a need for information security and critical infrastructure security etc

[scarlet ferry]

Of course, I didn't mean it as an interest in this particular server, but in general. And I don't mean to bring attention to these things in an ethical server, I just want to know more about it. Tell me if it's not the right place to do so.
It's just that I've seen public servers where they're -well, not explicitly encouraged- but accepted. Like they're necessary to something, and I find that really interesting, because as you said "the bad they cause people" is there. Can you affirm that it's never a great solution to ignore the law? Still, sorry if that kind of question isn't the best here.
Also, I understand that even with no Black Hats at all, you'd still need to secure things, that's normal.
(Still here for answers, if anyone passes by)

[lime fern]

Yeah it’s a touchy subject so I’m not gonna comment anymore on it

[south inlet]

Why Is black hat an essential?

[scarlet ferry]

More like is it an essential

And if so, why

[sonic rain]

does anyone know how to get kali linux on windows 11

[quaint basin]

Yes.
Any other questions to which you would like answers?

[uncut shell]

have you tried Kali's website? 😅

[summer verge]

https://tenor.com/view/ba-dum-tsss-drum-band-gif-7320811

[dusty swallow]

I'm looking to wipe one of my drives and install kali linux over it. I currently run two drives, one is an SSD and one is my factory C drive. Due to a fatal error, OS corruption, I accidentally ended up installing Windows 11 on my SSD and run my computer off of that. I want to wipe my factory drive, which is now my D drive, and run it strictly off of linux. Any advice?

[spark sun]

Dual booting is usually more trouble than it's worth. Strongly recommend running a VM instead

[dusty swallow]

Any VMs you particularly recommend? I've had VirtualBox recommended to me, not sure if any are better or worse than others

[spark sun]

Depends on what you are running as the host OS. For windows, VBox, VMWare workstation, Hyper-V are all fine especially as a beginner.

[uncut shell]

on top of what juun said, you kinda wanna keep things like Kali nicely locked up inside of a VM
I personally like using Hyper-V, VMWare Player is their free version, or VirtualBox but from personal experience, VMware is a tiny bit smoother

[dusty swallow]

Thank you both very much!

[dreamy niche]

Is it considered a Security Vulnerability or Bug if a website is storing Log-in parameter cookies like Email Address in plain text inside the browser cookies?

[mighty echo]

are they storing the password in plaintext?

[twin ridge]

As a jwt, probably not

[lime fern]

But couldn’t a bad guy send phishing emails to those stored emails?

[twin ridge]

they won't likely have the same one

[dreamy niche]

nope the password is safe
it is just the email thats exposed

[radiant jacinth]

Hiii (whisper)

[burnt night]

@safe widget when a mod is dealing with someone doing something illegal, please take a step back

[chrome zealot]

why cant I have access to the ad chats.

I am doing lateral movement

in ad

[south inlet]

You do, they're under Networks.

[chrome zealot]

sorry, i foget to tick the list of browsed chanels

[radiant jacinth]

Hey guys, I wanted to ask if there is anyway I could do bachelor's in computer science? I'm asking this cuz I had commerce in 12th.

[keen wind]

Is it illegal to bruteforce your own account on not your site? I forgot the password to the mail I didnt used for years

[past olive]

Illegal to brute force anything on any site without explicit permission

[soft pier]

@burnt night

[south inlet]

I think you just answered your own question.

You don't own the account, the providor is just giving you permission to use it.

[ashen radish]

I am starting a new internship next week and they told me to get familiar with active directory and powershell scripting. Is active directory much different from linux administration because I am way more familiar with linux and from what I've seen powershell scripting isn't much different from bash scripting. Pretty much what I'm asking is there anything I should look out for?

[summer verge]

rule of thumb, if you really need to ask if something is illegal, it's almost certain that it is 😂

[tawdry dove]

Yes, Active Directory is different and so is powershell.

I'd start reading the MS docs

[ashen radish]

Ok thanks

[mystic tulip]

What percent of tryhackme is actually free?

I get paid rooms too often and I can't buy them rn

[radiant jacinth]

if i remember correctly

Over 75% of the rooms are free. So 0.75x800=600

[twin ridge]

paid rooms are often in the paths to incentivise premium, also it's good content

most of the challenge rooms are freebies

[gleaming ravine]

hello everyone! i'm hoping this is the right channel to ask more specific questions.

i'm currently doing the SOC L1 path, and it provides a pretty solid base and understanding of its work. however, sometimes i feel parts get muddy and a little harder to grasp.

for context, i have a background in compsci and cybsec, it's my major in university and im on my final year, so im not completely unfamiliar with the learning process. its just that ive noticed that while they expose you to a variety of different tools, it can get especially overwhelming and brain-frying without context on how when some of them are used or applied sometimes. in addition to this, ive found the endpoint monitoring section to especially be an information overload at times? when we have SIEM solutions, i'm not sure why we'd use tools like sysmon manually when we can just forward them as agents on our desired SIEM. lastly, the splunk rooms are really cool, but i noticed that the Splunk: Basics room provides barebones of a tutorial, and when you move onto Splunk: Incident Handling, its a whole new whiplash of different commands and information that THM provides you (which is nice, but i feel like doesn't provide much in the way of self-learning).

i guess what i'm really trying to know is, am i adapting the wrong mindset? i've been told by professionals that the cybsec tools used can vary from company to company, so its moreso just a benefit to understand what types of tools are out there. i also tend to cut out the white noise and learn things that i feel are much more important when it comes to L1 SOC (ie. Understanding how a SIEM works, basic Networking and Monitoring Skills, etc) and as a result, i'll find myself rushing different modules and i'll feel slightly bad about it. i'm already on DFIR and i'm close to finishing my certification and have a roadmap planned for my career. (feel free to ask, im open to guidance). there are many things in this learning path that i definitely will come back onto to read to better grasp an understanding, but i mostly feel bad at times when i display a disinterest for a specific section of a module at times. any advice? note: please ping me! i usually have notifications at a minimum

[rugged frigate]

Holy wall of text.

[gleaming ravine]

my bad man, just new here and have alot on my mind 😭

trying my best to really digest the content, without underestimating the position itself

[lime fern]

I suggest taking notes on the stuff your learning. It helps so much because you can go back to them and relearn what you learned using the notes. It’s also great if you forget something

[fathom panther]

youre right, tools will vary differently in each company but youre looking at it in terms of specific tooling. you dont need to get good at the tools provided by THM, they're just there to help you practice

you could say that you dont need to learn sysmon as an L1 analyst but that tool is there to solidify the theoretical knowledge you were taught in earlier modules

[lime fern]

Endpoint security is basically the protection of endpoints, like desktops, laptops, phones etc. Administrators use endpoint security to stop threats that are targeting the endpoints if you haven’t already knew that.

[gleaming ravine]

this is great advice! ive had it on my mind for a while, but do you recommend my approach in just, going through modules, then coming back to them at a later time for digestion? since there is alot to cover and i feel like if you spend so much time in one area itll just tunnel your vision

[gleaming ravine]

this is reassuring to hear, and something i wanted to hear if i were honest. it just felt like if i really spent time on them as tools, only for my hiring company to ask me to learn another tool, id feel like what i was learning would be all for nothing.

[gleaming ravine]

of course, right now i'm looking at them as foundational conceptual knowledge

so that when they're brought up i know XYZ about tool and when and where it is used. so in this context sysmon would be utilized by forwarder agents to process logs for example

[gleaming ravine]

yeah of course, i just saw that module as like in-depth detailed knowledge to build a foundation on how it works when you actually use a SIEM. since SIEMs process everything anyway, correct?

[gleaming ravine]

assuming you and mknukn have industry experience (i have none yet, im working toward it), if you were to do the SOC L1 path again, which sections in each module would you say are very important to learn and focus on? (ie. in network security and traffic analysis itd be snort, wireshark, and zeek for XYZ reasons)

[lime fern]

Thing is lol

I don’t have industry experience, I just like cybersecurity and I want to get into the industry

Idk about mknukn tho

[lime fern]

That’s hard to say which isn’t important because there all really important. Each of those monitoring systems do different things. So it all depends on what you’re company uses.

[fathom panther]

are you asking for tools to focus on?

[gleaming ravine]

in the learning path yes, tools that would provide the most value learning wise

[lime fern]

Personally for the network analysis zeek and wire shark

I also liked grim very much

[fathom panther]

Snort and ELK i'd say

[dense dirge]

do you guys have red any books about ethical hacking? books on linux, nmap or maybe other tings? I am starting this journey with Try hack me and i am wondering if i should read a book about it.

[south inlet]

Red Team Field Manual is a good for commands etc.

Nmap book is good.

[south inlet]

check out #bookclub

[dense dirge]

Thx!

[summer verge]

Read The Fine Material 😂

[gleaming ravine]

thank you!!

[hoary nymph]

Gave +1 Rep to @lime fern (current: #112 - 56)

[gleaming ravine]

thank you both! your advice has been helpful. i guess the only question i have left is that most SOC L1 duties will be mostly done on a SIEM/SOAR platform and the tools the THM path provides are for practice and to better understand what you're dealing with at a conceptual level yes?

[fathom panther]

Yeah, you will use enterprise platforms most likely like Crowdstrike, Snort, etc.

[hybrid jackal]

hi there

i need help with cryptoanalysis study

can someone tutor/guide me on this topic

[lime fern]

I don’t think anyone here will tutor you but if you do the room yourself and need help you can always ask in #room-help

[little shore]

You'll need a lot of initiative in this field as it requires continuous upskilling.

[dreamy kayak]

Ayee love this easter egg in the 3M release Thank you THM!

[summer verge]

0Day FTW!!! 😂

[rugged frigate]

0day

[past olive]

Holy shit, its 0day

[past olive]

reminds me of linux mints bios screen lol

[smoky mortar]

Still #1. 🥇

[radiant jacinth]

Any mentors willing to teach or give a newbie advice in pentesting or in ethical hacking

[tawdry dove]

If you have specific questions, ask them, otherwise going to #start-here is going to be your best bet.

[pearl hare]

guys

i m tryin to install kali on vmmware

but its just skips install software step nd finishes installation

nd even after submitting correct login nd passwd it says incorrect login nd i m unable to login now

what should i do

[rugged frigate]

have you maybe downloaded a prebuild image?
Try toor as the password with the user root.

[pearl hare]

yes i did

i m stuck at this step

[twin ridge]

That hasn't been the default for years now

[pearl hare]

so what do i do now

i m tired of starting it over nd over again

its just not working

[twin ridge]

Did you grab the ISO?

[pearl hare]

yes

ok wait

i downloaded iso file

nd then i also select this

in the start

how can i disable slowmode

it finishes installation without select nd install step

nd then i cant login

[south inlet]

The default credit are

Username: kali
Password: kali

[pearl hare]

yeah but iit asked me for user name nd passwd

so i changed it

[south inlet]

OK, what username are you entering?

[pearl hare]

my name

[south inlet]

"dwen" or "Dwen"

[pearl hare]

dwn

dwen

[south inlet]

Then you've probably entered your lass wrong either at login, or when you've created the user.

[pearl hare]

no i didnt seriously its first name nd short psswd

nd it also didnt complete select nd install software step

its actually installs till the end nd then it says it failed

hey where did u go

[south inlet]

If it errors you probably need to start again.

[pearl hare]

yeah thats what i m doin rn

i m so tired of doin it again nd again

ok a question why do we install kali in vmware in ethical hacking nd like how much i m gonna use it

is there any alternative of it

this

[twin ridge]

You use VMware because you don't want to break your daily use os. Also it's better to contain anything malicious that might pop up. There are alternatives to VMware and Kali. For hypervisors, you have VirtualBox, hyper-v (on windows), and KVM/qemu (generally on Linux). There are alternatives to kali, such as Parrot, but I'm not a fan personally

[pearl hare]

oh okkk so hyper - v works fine with kali ?

i m on windows

i cant move forward coz i m stuck on installing kali

[south inlet]

You should look up a guide in YouTube.

[twin ridge]

Should work, with caveats, it has (had) issues with getting a decent resolution without some shenanigans

[rugged frigate]

good to know. I haven't looked at prebuild ones for years.

[twin ridge]

To be fair, I use vagrant to bootstrap my kali

[rugged frigate]

no idea what bootstrapping is.

nvm. figured it out.

[pearl hare]

Okkk thnkssss

[pearl hare]

Okiessss

[twin ridge]

They may have fixed that though, last time I played with it was 3 years ago

[radiant jacinth]

A little bit late, but for me, Kali and Parrot both don't work well in hyper-v

[tawdry dove]

In what way? I hate when people say this at work, but it works fine for me.

[pearl hare]

Oh okkkk

[radiant jacinth]

My Kali just randomly breaks in hyper-v

[tawdry dove]

I mean that's not really helpful. What is the breakage or perceived breakage.

[radiant jacinth]

I don't know anymore, last time it broke (and last time I used Hyper-v) was like a year ago

If I remember correctly, it was some problem where it wouldn't log me in. So I was stuck at the login screen

[twin ridge]

that might be a you thing and not hyper-V

[radiant jacinth]

Nah bcs the same iso worked fine in Virtualbox

[spark sun]

that doesn't mean anything

the ISO is just the install image, it's not the actual persistent runtime

[summer verge]

Hyper-V is really telling you. It's not you it's me, but looks like it's really you 😂

[radiant jacinth]

Yeah but i mean, that was immediately after the install

[spark sun]

That happens sometimes. It's rare, but bugs do happen during automated installs.

[radiant jacinth]

Maybe that's the problem

[azure knoll]

Morning thm acquaintance strangers 🌅

[rugged frigate]

greetings bit entity

[burnt night]

@rugged frigate please leave it to the mods

[rugged frigate]

aight.

[acoustic stream]

huiee

[solar lantern]

Hey everyone well i wanna ask that if my THM Subscriptions WILL EXPIRE then i am able to complete course and fetch cert or i didnt get anything

[twin ridge]

Anything you've done stays done

[solar lantern]

You want to say that if i have enroll in the room so it will not lost my progress i can done rest of things and fetch my cert
Isn't it ??

[south inlet]

Correct.

You'll still be able to fetch any certs (can always save them)

You just won't be able to re-access completed subscription rooms

[modest elk]

vmware is so much better lol

[tawdry dove]

Better than?

It's probably going to depend on the use case of the environment

[maiden wolf]

Greetings, I would like to ask for guidance on the order in which I should complete the learning paths, as I'm looking for a job as a SOC (Level 1). Currently, I'm undertaking the Pre-Security path, and I have finished the Introduction to Cybersecurity course. My plan is as follows:

Introduction to Cybersecurity
Pre-Security
SOC Level 1
SOC Level 2 (Maybe?)

Extra background info: I'm currently in my last year of my Master of Engineering (MEng) in Informatics and Computer Engineering.

[lime fern]

Sounds like a pretty solid goal, that’s actually exactly what I did

Working through the soc 1 right now

[maiden wolf]

Thanks for the confirmation

[narrow trout]

add the web fundamentals path and the cyber defense one also there

[maiden wolf]

In which order should I complete them?

[narrow trout]

doesn't matter that much but i would do web fundamentals first because it's easier and could be helpful for the cyber defense one

[azure knoll]

hi y'all just asking a question about a folder I can't delete. I had a sync issue with onedrive saying I had a folder with the same name, I re-named it but it wouldn't delete, I dont know where the folder came from as I only ever had one, when I renamed there was suddenly two. So I deleted it from one drive and cleared recycle bin.. I then unlinked onedrive and relinked again, restarting my computer various times. I've tried CCcleaner Ive tried recursive deletion through the CLI. Its a folder within a folder within a folder... Year1/Software/Java/eclipse .. and then a load of eclipse subfolders no files. Anyway I got told today I could use an ubuntu boot (USB) and access my file system and delete it, I was wondering if any of you can explain to me how i would do the ubuntu boot, I din't really know you could boot ubuntu and have access to windows folders still so I'm a bit lost

[tawdry dove]

Do you have the Eclipse IDE on your machine?

That could be where it was pointed to place it's stuff

[azure knoll]

No I deleted a while back, as thorough as I could can't find any traces

[tawdry dove]

But you did have it installed?

[spark sun]

Are you mirroring your onedrive locally, or storing everything in the cloud? There could be a weird interaction between the OneDrive app and OneDrive cloud

[azure knoll]

Yes

[azure knoll]

Yeah I think this may be the issue. Honestly a bit thick didn’t think to do an actual reset don’t that now seems to be fixed

[tawdry dove]

Also true

[azure knoll]

Oh never mind it’s not fixed

[spark sun]

Discrepancy between CLoud and local storage can often be an ongoing problem.

[azure knoll]

so initially it was all mirrored locally, I completly unticked everything to free up space so it wasn't stored locally, but then I seemed to have issues with loading soem case folders for axiom software, so just restored it back and then the issue occured when it was attempting to re-sync

[spark sun]

I would recommend removing that directory from the automatic cloud sync, delete the entire directory, then delete the files and directories using the cloud app before reconnecting

[azure knoll]

yeah, it's no longer available on the cloud at all. The directory itself was my onedrive directory, but only containing one folder ->containing subfolders which seemed ot contian eclipse. So even when I unlinked onedrive, It was still available locally as this weird folder which wouldnt delete , all I can do is change the name

so now its just called delete-this-folder and seems to be completly disconnected from onedrive itself ,, my cloudl onedrive folder seems intact

it also wont let me delete any sub directorys within it

ok I spent to much time yapping that i didnt actually try and remove it after the restore I just did, its gone haha

thank you anyway all

[random tartan]

as SOC analyst , i confirm , it's a solid path

[maiden wolf]

thanks for the response

[brazen pasture]

hey, guys, can somebody me help? i can not connect with my vpn...

and i don`t see it at manpage as well

[odd acorn]

#site-support

[brazen pasture]

thanks.

[supple jewel]

hi everyone i'm new on here, anyone ready to work me through th process of cyber security?

[flat karma]

ye - the rooms

[summer verge]

#start-here

[mellow granite]

#bot-commands

[crimson edge]

https://www.polygon.com/2024/4/20/24134970/discord-arbitration-how-to-opt-out

[rugged frigate]

typical evil corp.

[pulsar frigate]

GM

[soft pier]

https://github.com/lynnpepin/arbitration-opt-out-templates/blob/main/Discord/discord_opt_out_template.md

for the people who want an email template

[shell dawn]

😂

[ruby pagoda]

hello can someone help me the Room Vm won't work in OpenCti task4
/soc level 1 /threat intellegence/ OpenCTI

/task4

[south inlet]

#room-help please.

[ruby pagoda]

Im sorry, thank you

[torn yarrow]

Bro do anyone have idea about buffer overflow attack

[tawdry dove]

Is this for a THM room?

[torn yarrow]

Nope

Its actually my project

[tawdry dove]

For school or work?

[torn yarrow]

For school

[misty obsidian]

I'm sorry but we don't help with school work on this discord

[torn yarrow]

Thats okay🥲

[summer jetty]

shh be quiet

[radiant jacinth]

🤨

[radiant jacinth]

i sent it

[sour bobcat]

hi

im new

i have a problem with the room microsoft windows hardening somebody can help me ?

[south inlet]

#room-help

[radiant jacinth]

Web Exploitation CTF Challenge

can someone help me solving this?

[rugged frigate]

we can't help you with ctfs.

[odd acorn]

Huh?

[rugged frigate]

I assume it's a ongoing ctf.

[odd acorn]

Best not to assume

[tall relic]

What is the meaning of this?

OpenSSH 6.6.1p1 Ubuntu 2ubuntu2.13 (Ubuntu Linux; protocol 2.0)

I am confused now, what should I do now in searchsploit command?
should I search

searchsploit openssh 6.6

or

searchsploit openssh ubuntu

I am confused and tell me how to read the vulnerability on cve mitre website Please. 😅

[tawdry dove]

Is this for a THM room?

[tall relic]

No

[tawdry dove]

What's it for?

[tall relic]

nmap

scanme.nmap.org

[tawdry dove]

I would recommend you read the tool's documentation as it will walk you through examples of commands. As far as the Mitre stuff, you can use Google dorking to narrow your search results to what you're looking for. There is a THM room, that walks you through basic dorking.

[tall relic]

I got it. Although I am not asking for attack. I am just confuse what this OpenSSH 6.6.1p1 Ubuntu 2ubuntu2.13 (Ubuntu Linux; protocol 2.0) is. Ubuntu 2.13 version I am confused with. And OpenSSH 6.6.1p1.. that thing is confusing.

So I am just asking that what those things are. And then the later question is what should I put in searchsploit command.

but yeah I managed it somehow. Found CVE for 6.6 OpenSSH.. also found out that OpenSSH < 9.6 is vulnerable to many things...

[tawdry dove]

Right, and I am trying to set you up in order to perform research. In cybersecurity, it's very important to be able to do your own research and come to your own solutions. That and paperwork make up 95% of the work you're going to do in the industry.

The metasploit manpage/manual will have how they want you to search things lined out.

[tall relic]

Yes Boss. And thank you.. ^^ today my 5th day in learning cybersecurity.. so I will learn from top people like you. 🙂

[hoary nymph]

Gave +1 Rep to @tawdry dove (current: #20 - 391)

[tawdry dove]

Haha, nowhere near the top, but giving yourself a solid base is the way to go. Start small and increment your learning. Remember to take breaks.

[tall relic]

Thanks for the reminder.. 😅😅 I'll sure learn bcz I'm having so much fun.. but for now it's 2 AM so I should sleep...

Good Night

[formal pendant]

good night

[toxic fern]

.

[pale hazel]

Hello everyone

[candid loom]

helorrr ppl

[turbid granite]

Hello

[copper cove]

hi

[unkempt matrix]

hello everyone

[azure knoll]

hallo

[opal sand]

hey

[formal pendant]

high

how are you today?

[balmy osprey]

hello guys

[copper cove]

Good morning!

[opaque apex]

Evening guys

[gray dust]

6:30 pm here

[night furnace]

Is there a coupon code for the subscription?

[tall relic]

Is it good idea to read nmap book from it website? Or just by doing practice I can learn?

Is it worth reading as a beginner like me? Or I can read them later in my life?

[tawdry dove]

How are you going to learn if you don't read?

[tall relic]

I mean, is it worth reading full book for now? As I have very less time in my course. Exam is coming. I mean I know basic Nmap now from THM room and from my class.
Just wanted to know do I have to read it now now only? Or I can read them later also? 😅

[summer verge]

it always worth reading, what you should ask yourself is I have time to read it, and the answer is yes, you can read a bit bit during your breakfast, a bit during your lunch, and a bit before going to be, or even better designate 1 or 2 hours to read during the day. The real question is do I have the willpower to do it 😉 🙂

[tall relic]

OK I got it.

[forest heath]

Students get 10% off or something right?

[fathom panther]

20% off

[forest heath]

Wish I used it haha!

Is there anyway to update a subscription and use my student discount

[south inlet]

Monthly or annual?

[forest heath]

Monthly

[south inlet]

Yeah cancel your sub. Then change your email to your academic email

[forest heath]

It’s via open university I don’t have a separate email unfortunately

[south inlet]

Contact support, you can provide proof your a student. 🙂

[frail vault]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Apr 30, 2024, 11:40 AM

[radiant jacinth]

@south inlet another one for you

[south inlet]

You ok there?

[novel geyser]

Anyone starting their journey on obtaining the CySA+ cert? Looking to maybe find some people that would want to do a study group

[vague steppe]

Dm?

[little shore]

Have you checked the Certification Station discord? It has users or students who are pursuing multiple certs as well.

[novel geyser]

I have not, but def will now. Thank you

[hoary nymph]

Gave +1 Rep to @little shore (current: #13 - 534)

[novel geyser]

If one of you sent me a DM, I accidently hit ignore so please message again cuz I didn't see the username in time.

[spice pier]

Hello guys, does anyone here know how to create my own vurnable virtual machine? (virtual box)

[south inlet]

Is this homework?

[spice pier]

no, i just don't want to buy subscribtion:)

[odd acorn]

~80% of TryHackMe rooms are free 😎

[spice pier]

i know, but i still want to know a bit more, maube test everything myself

if you can recomend me some kind of a book, it would be great

[twin ridge]

Not really any books for that

But it involves a lot of research

[spice pier]

do you know any like sites or documentaries about it?

or some YT-channels?

[twin ridge]

I mean, I did it the old fashioned way, ie try harder until it works

[spice pier]

like brute-force harder?)

[twin ridge]

You want to create a machine?

[spice pier]

yes

[twin ridge]

Wouldn't say brute force is the right term

More experimentation and analysis

And science!

[spice pier]

nah, it was a joke

[twin ridge]

First step is to have a plan, what do you want your machine to exhibit?

What story do you want to tell through your machine?

What path should someone take to crack it?

Then it's mostly execution and google

[quaint basin]

Is that still the case?

[twin ridge]

Probably 75 or so

[quaint basin]

Now I'm curious. Brb, off to check lmao

[twin ridge]

Would be interesting to troll the api to check 😉

[spice pier]

yes, but many of the starting rooms aren't free

[quaint basin]

Exactly what I'm planning to do

[twin ridge]

Gotta have a hook 😉

The paths were originally vip only

Though they aren't obligatory

[south inlet]

63%

[spice pier]

i mean there is a Jr Penetration Tester room, there only SQLInjections are free

[quaint basin]

... there's a switch to filter by subscription only isn't there

[spice pier]

at least

[south inlet]

66%

[south inlet]

Should he, used to be.

[quaint basin]

Right, okay, what are you doing lmao

I was doing it with the raw data. Figured that would be most accurate 🤷‍♂️
Gimme 10 minutes

[south inlet]

#general message

[quaint basin]

This is interesting actually

The room count in Discord says 833 rooms, but the search only returns 562

{"status":"success","data":{"docs":[],"totalDocs":562,"limit":100,"page":7,"totalPages":6,"pagingCounter":601,"hasPrevPage":true,"hasNextPage":false,"prevPage":6,"nextPage":null}}

Oh, hang on, I see why

Well, that makes life easy

Assuming the API is correctly reporting paid vs free, the free count is 562 / 890 == 63%
Subtract 19 for the AWS rooms you say?
543 / 890 == 61%

Either way you're 20% off @odd acorn

[south inlet]

Yeah. They're technically free rooms, but you need the AWS license.

[odd acorn]

Where did you get 890 from? 🤔

[quaint basin]

That said, I don't think that's the most useful metric anymore honestly, given a lot of those are older community rooms and there's an active attempt to filter newbies into learning paths and modules. iirc it's what, the first 1 or 2 rooms in a module that are made free as a hook, so say 20% of each learning path, ish?

[quaint basin]

/api/v2/hacktivities/extended-search?kind=all&difficulty=all&order=relevance&roomType=all&contentSubType=all&page=7&searchText=&userProgress=all&limit=1

[odd acorn]

Doesn’t that now return learning paths and modules though?

[quaint basin]

So, assuming the API is self-reporting correctly...

Oh FFS. One sec, I will revert to doing it manually lmfao

[gilded marsh]

Apologies for derailing any conversation, but I have a question for anyone who is on the more advanced side of the field. I have gone through quite a few of the learning paths, and I am wrapping up read teaming now (I also have Pentest+ just about finished and Offensive Pentesting is similarly close), but whenever I go to practice with other rooms, it feels like nothing carries over. I have been able to complete a few rooms without referring to walkthroughs, and that is nice, but for the most part it always feels like the rooms require some specific tool or knowledge around an exploit/vulnerability in some piece of software/configuration. I am young and new to the field, and everything I know is self-taught (whether it be reading articles, watching youtubers like David Bombal, or learning on TryHackMe), so I am aware it may just take more time. However, I keep feeling extraordinarily frustrated as I feel as though what I am learning is either not applicable or simply too niche. I also understand that it may be that this is part of cybersec, constantly trying new things and doing research to find new vectors of attack and learning about new ways to exploit and move around networks, but everything I miss feels like it should be fundamental.

Whoops! Didn't get to finish that. Sorry for the wall of text, but essentially, am I doing this right? Am I missing something? Should I just keep grinding everything, or are there more fundamentals people would recommend? Thank you!

[burnt night]

You learn the foundations and you learn how to research, that's what you need tk have properly down

It's a very very wide field

[quaint basin]

Okay, filtering out modules and paths (why on earth are they returned from the same endpoint lmfao), I'm getting 792 total rooms.
68% free, so a bit closer to the 80% at least. The new question though is: where the fuck is the 833 reported in the room count coming from?

[odd acorn]

uhhh there's an API route that gives the site users, total rooms and another statistic

bot it open source, you can find it in the api section

[frail vault]

TryHackMe's Github

Get the bot's GitHub link.

​

https://github.com/JabbaSec/tryhackme

TryHackMe Socials · May 5, 2024, 5:25 PM

[quaint basin]

I know, but how's there a discrepancy between that API endpoint and the API returning rooms?

[odd acorn]

that returns everything that is considered a room
Networks, AWS, etc.

[quaint basin]

Okay, I count 10 networks

Plus, what, 19 for AWS?

We're still missing 13

Well, 12 against the 833. 13 against the current site-stats API

[odd acorn]

I'd have to speak to the site team to see what is included

[quaint basin]

Worth doing imo
Either way, it's less than 80% now 😢

Uh. Thanks Discord. Not quite the Cry emoji I wanted

[summer verge]

You can't always get what you want 😉 😂

[quaint basin]

[summer verge]

rave emoji vibes 😂

[south inlet]

Choose life.

[quaint basin]

No. Life sucks

[south inlet]

Choose a job.

Choose a career

[summer verge]

sucks too 😂

[south inlet]

Choose a family.

Choose a fucking big television .

[quaint basin]

I have a job and a career. I enjoy my job and career -- they let me be chaotic

[south inlet]

Call yourself Scottish smh.

[quaint basin]

Ew, no thanks lmfao

[hoary nymph]

Gave +1 Rep to @south inlet (current: #1 - 2217)

[quaint basin]

Oooh. Congrats. You've knocked James off his perch lmao

[south inlet]

took me long enough

[summer verge]

Take a whisky and enjoy it 🙂

[quaint basin]

@burnt night

[burnt night]

Not in pentesting really, better to use specific wifi tooling for wifi etc
If you're doing a hardware device that isn't wifi/bluetooth then maybe but those aren't that common

[quaint basin]

Possibly more likely in OT / SCADA?

[burnt night]

Nope, they bridge to conventional comms. GSM, wifi, Ethernet

[quaint basin]

Faiiiiiir

[burnt night]

Embedded devices somewhat yeah but manufacturers don't like actually having to put work in. Off the shelf modules and the like.

Moderately high effort to do that, you need a QFH and high up etc

[summer verge]

When I was a child in Argentina I used to listen to BBC international broadcast on SW 🙂

[burnt night]

I still listen to some shortwave, down to long wave!

Had some really good distance from time to time, managed to get morse from Brazil in the UK at one point

[twin ridge]

LORAwan is starting to see use in Industrial applications

but they generally use off-the-shelf hardware as well

[summer verge]

next door neighbour 🙂 I spent a few summers in Brazil when I was a child my father had a timeshare there, in Buzios I believe

[burnt night]

Yep, modem modules. Mixture of lora and lorawan (adjacent OSI layers)

[soft pier]

osi model for ham radio sounds fun

though don't really have any pictures that breaks down what happens at each layer for ham radio osi model

[burnt night]

It's a generic model

[soft pier]

yeah.... just shadow does not know what goes into what layer for ham radio

of course it is a generic model that works for a lot of different use cases

what other reason would there be to make this model??

[nimble plaza]

anyone know a platform i can take CEH exam without paying

[south inlet]

Wdym?

[nimble plaza]

ineed to get certified ethical hacking certificate bt every platform iget its paid

[south inlet]

Yeah...

That's the process you pay for the cert.

You can't get it for free.

Unless you win one, even then, somebody paid for the ticket.

[radiant jacinth]

Get a job in IT / Cyber Sec and get your employer to pay for it 🙂

[dark breach]

In first case nmap told to use Pn switch since host is down. So I used and got all the ports are filtered means open ports are 0. On THM it giving it as a wrong ans where I need to ans the cnt of open ports. Btw why the host is down in first case?

nmap 10.10.230.8

Note: Host seems down. If it is really up, but blocking our ping probes, try -Pn
Nmap done: 1 IP address (0 hosts up) scanned in 3.03 seconds

nmap 10.10.230.8

Nmap scan report for 10.10.230.8
Host is up.
All 1000 scanned ports on 10.10.230.8 are filtered

Nmap done: 1 IP address (1 host up) scanned in 201.35 seconds

[south inlet]

#room-help please, as I said in general.

[dark breach]

okay

[frozen lark]

If I wish to switch to linux, what distro would you advise me to pick - Ubuntu, Debian, Mint, Fedora?

I'll use it for pretty much everything - Most less likely for gaming but possibly, lightweight gaming rarely

Just want to get some extra opinions

[summer verge]

Debian is the original, very into open sources free software, stable, probably not the easiest for beginners and not friendly with non-standard hardware, stable, but a bit outdated in software, the stable version sometimes is 2 version behind the last soft. Ubuntu is base on Debian, beginners friendly and out of the box support for most hardware (easiest distro to make nvidia work) Mint base on Ubuntu, and other version base on Debian, pretty much similar to ubuntu minus the snap (Canonical proprietary package) Fedora great distro, stable cut-edge base on Redhat, no recommended for beginners it's more like intermediate

[frozen lark]

What would be hard for a beginner in the OS that you mentioned that are not very beginner friendly? I mean I am already used to navigating in Linux because of THM

Creating files, moving directories and much more

And what would be considered a non-beginner?

[spark sun]

Do you understand how to debug an error with a package manager install?

If you can fix a dpkg install error caused by a corrupted apt install of a package, then I think you're pretty safe to go with an intermediate to advanced distro.

If you have at least a year of using linux as a daily driver (or if you can compile a program using the terminal), you should have most of the skills needed to adminster to your own fedora or debian

on bare metal

[summer verge]

Debian has a lot of config that you have to do it by hand editing files, stopping services, etc. Ubuntu you pretty much can do anything from GUI like windows

Actually I'm wrestling with nvidia on Fedora 😂

[frozen lark]

No, I wouldn't say so. I can make files, directories, change names, navigate directories from CLI, use various tools from CLI and use nano to write files. Update or upgrade system

Basic understanding of some directories

[frozen lark]

I can terminate a task by observing the system tasks with top or htop

[frozen lark]

I'm looking both for GUI and CLI functionality

But I want it to run smooth on my machine and not crash

[summer verge]

Fedora it's smooth and also it's base on Redhat so you will get used to manage rh like system which is a plus. If you have some knowleage of terminal managment you can go for Fedora, be aware that nvidia in Fedora it's kind of a pain in the arse you'll have to work in order to work

I always say that ubuntu it's the windows of Linux (not in the disrespectful way) but you can do almost anything on GUI so the problem with that is that you get used to, and when you force to use terminal if you don't have previous knowleage of terminal you don't know what to do, Debian and Fedora, you're force to use the terminal much more

[spark sun]

Not really. RPM fusion has been really stable for nvidia since about F35.

Ubuntu is a very common choice for ease-of-use, and it's basically a friendlier debian. Mint is another 'user friendly' distro, but I found it's stability to be lacking when I used it in 2014. it's probably gotten better, but I still prefer debian/ubuntu/fedora.

[summer verge]

yes but when you have 2 graphic card in a laptop and one is nvidia with optimus Fedora get confuse, I tried the RPM fusion and it didn't work

[summer verge]

I have a Dell G3 with Intel Corporation CoffeeLake-H GT2 [UHD Graphics 630] and NVIDIA Corporation TU116M [GeForce GTX 1660 Ti Mobile] the only distro that I could make it work for now it's ubuntu, I'm trying on fedora because I love fedora. I used Debian for a long time, actually yesterday I found a CD ROM of Debian 2.2 from a place called cheapbytes, I don't think the place existed any more

Proud Linux user since 1993 🙂 first distro was the first version of Slackware

[spark sun]

that's a well-known problem with optimus, and it's not just fedora that struggles with that driver set - I've been plagued with that on Ubuntu for 10+ years

[summer verge]

now you understand my issue, I didn't realise that after I bought the laptop, 4 years ago 😂 my next laptop I'll be more careful so I can go back to fedora 🙂 I installed 40 on a vm and it looks good 🙂

the laptop has 2 HDDs actually on SDD 250GB and one HDD 1TB, on the first one windows that come with the laptop, second one all for Linux, on the SDD I made a partition to install Fedora so I can try to tweak and make nvidia work, so far no luck. So I'm using cinnamon ubuntu until I can make fedora work here or change the laptop 🙂

[nimble plaza]

iwon't get the job today am still a student bt ineed the certification

[quaint basin]

How exactly do you expect to take the exam for free?
Even if you found pirated materials (which I highly recommend you don't), those don't give you the cert.

Only EC-Council can certify you as being a CEH (side note: 🤮), which means you need to sit their exam... Which means you need to pay lmfao

Short of bribing someone on their staff, or hacking into whatever system they use to track certifications and adding yourself in... Both of which would be illegal and incredibly stupid.

[nimble plaza]

i was just asking 👀

[quaint basin]

But not, apparently, thinking

[bitter furnace]

Hi guys, I need yours help. In the room of CI/CD and Build Security Contacting I loose MU-TH-UR 6000 password by accidently. How do I reset that?

[twin ridge]

Have you looked in the associated help channel?

[bitter furnace]

Yes.. I found a way thank you!

[radiant jacinth]

how do i rank up

[summer verge]

asking the same question in every channel won't get you answers any faster

[radiant jacinth]

igh

maybe u can answer me]

[zinc grail]

Hello :)

[zinc grail]

attitude lmao

[frail vault]

@worldly epoch

Points Explained

Article Link

https://help.tryhackme.com/en/articles/6563910-points-explained

May 8, 2024, 6:38 AM

[uneven dawn]

nice 🙂

[valid moth]

Hi, can someone help me out to get the correct answer.

Match all of the following filenames: File1, File2, file3, file4, file5, File7, file9

i always gets the wrong answer

[radiant jacinth]

#room-help

And explain a little bit more. Follow the steps in that channel

(Pinned)

[valid moth]

thank you

[radiant jacinth]

@south inlet

[south inlet]

@fierce tartan no self promotion please.

[uneven nebula]

Hey all, I have a couple of general tech question not security related and thought I would ask about it here. Long story short, part of my job is saving images from manufacturers websites to use on our own product pages. A lot of times, these webpages are using images in the WebP Image format. What's confusing is that if I inspect the elements, the files are clearly .jpg files, but firefox and chrome automatically try to save them as WebP files. Sometimes I can "save as" and use "all file types" and just add my own .jpg extension to the end, but other times the files will become corrupt, or when I try to upload them to our site (which doesn't support WebP) they fail to upload, even though they have the .jpg extension AND the file info says they are .jpg files. What's most interesting, though, is I have found that I can copy and paste the image link into a terminal and download the .jpg file by removing the extra bit of text from the link. example store.com/items/files/1.jpg?v=12345 if I remove everything after 1.jpg it will download the .jpg file just fine. So..... what the hell is going on here??

actually i just discovered something else interesting. I'm on MacOS (work computer), and when using "get info" on the file in Finder, it clearly says it's a .jpg file. but opening a terminal and using "file" command on the file shows it's a WebP image!

This isn't exactly a problem or anything for me. Just something I've found and I'm super curious about and I can't seem to find anything on google that can tell me why this is happening.

[rugged frigate]

the file command looks at the magic bytes of the file to figure out what type it is. Seems like on mac it just looks at the extension and gets fooled easily.

[uneven nebula]

That was my initial thought, but I'm only vaguely familiar with magic bytes and don't know how to compare files and their bytes like that.

But also why wouldn't firefox just download the .jpg? how are webmasters forcing us to download a webp image if the original file is a jpg?

[rugged frigate]

naming a file just jpg doesn't change what type it is. On some formats it works.
Webp as far as I know is optimised to work on websites so it's prefered.

[uneven nebula]

what about the wget part and removing the link after the .jpg? what's that part of the link doing?

[rugged frigate]

it's a url parameter. It can be used to pass some informations for some code to process. By removing it you query just the image.

you can do some research about file extensions and methods of grabbing them.

[uneven nebula]

thanks 🙂

[radiant jacinth]

Can someone help me build a new pc for school ;-; don’t know too much other than what they do and to connect them. As for part details it’s confusing

[steep wave]

can you get an A+ certification book. that shows you all of that stuff... 🙂

[magic gale]

How can i become a security researcher?

[tawdry dove]

Work in the field for a number of years, developing a deep understanding of how things work, and then either do it as your primary job employed by another company or as a side hobby to your main job.

You can learn introductory material by going to #start-here

[radiant jacinth]

make a deffense system and try hack it in any manner as possible and then write the summary u will get both the more good defense and how to attack the deffense (maybe u will get new deffense and attacking knowledge 😈 )

[heavy lintel]

What is my profit if I report a payment related bug?